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ABSTRACT 


UNCLASSIFIED 


In  previous  work  with  our  colleagues,  we  have 
investigated  some  of  the  possibilities  of  proving  mathe¬ 
matical  theorems  on  a  computer  on  a  man-machine  basis. 
At  the  intermediate  stages  in  a  proof  we  are,  in  general, 
trying  to  prove  some  formula  from  certain  suppositions 
and  previously  proved  heorems.  If  such  intermediate 
steps  have  "trivial"  pr.  ofs,  we  might  hope  to  have  the 
machine  verify  this  automatically.  This  report  describes 
some  algorithms  which  verify  certain  "trivial"  proofs. 
These  algorithms  can  be  read  off  from  the  definition  of 
proof  in  the  formal  systf'  -  through  Sg  described 
in  this  report.  Algorithms  concerning  the  propositional 
connectives  are  explicated  by  systems  and  Sn  ; 
quantifiers  by  S3  and  S4  ;  border  predicate- 
function  calculus  by  Sg  ;  and  many  sorted  variables 
and  constants  for  ti/-order  predicate-function  calculus 
by  S6  . 
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SUMMARY 


This  report  defines  and  describes  six  formal  systems  of  logic, 

Sj  through  Sg  ,  for  which  proof  procedures  or  partial  proof  procedures 
are  readily  contrived.  The  systems  through  are  considered  in 
order  to  simplify  the  descriptions  of  S5  and  Sg  .  System  Sj  is  a 
fragment  of  the  classical  propositional  calculus  whose  theorems  are 
those  tautologies  which  can  be  shown  tautologous  by  assuming  them  to 
take  on  the  value  falsehood  and  arriving  at  an  inconsistent  assignment 
to  the  variables  by  not  using  any  "branching"  rules.  This  system  sug¬ 
gests  an  efficient  means  of  handling  the  propositional  connectives  in 
the  later  systems.  System  S2  is  the  completion  of  Sj  .  S2  has 
"branching"  rules  which  correspond  to  treating  certain  propositional  var¬ 
iables  by  cases.  This  differs  from  Gentzen's  treatment  by  Sequenzen  in 
that  Gentzen's  "branching"  rules  consider  the  value  of  the  antecedent  or 
consequent  of  a  formula  by  cases.  System  S3  is  a  fragment  of  the  first 

order  predicate-function  calculus.  In  3  ,  formulas  are oroved  by  con- 

3 

tradiction.  The  quantifiers  of  the  denial  are  stripped  by  cutting  the  denial 
in  miniscope  form  and  replacing  them  by  Skoiem  functors.  This  is  remin¬ 
iscent  of  the  Herbrand  technique.  However  S3  uses  a  process  called 
matching  to  consider  only  reasonable  Herbrand  disjuncts.  System  3^ 
is  the  completion  of  S3  obtained  by  carrying  out  the  full  Herbrand  pro¬ 
cess.  'xhe  completeness  theorem  for  5^  ts  outlined  in  on  appendix. 

A1- -order  predicaie-fur.ciion  calculus  cuuerned  after 


System  3^  is  an 


S4 .  A  method  for  handling  types  is  included  in  Sg  which  allows  us 
tc  prove  theorems  at  the  lowest  possible  type  and  yet  have  instances 
of  these  theorems  involving  higher  types  available  by  substitution. 
Function-like  properties  of  predicates  can  also  be  obtained  as  instances 
of  more  general  theorems  concerning  functions  by  substitution.  System 
Sg  is  an  extension  of  Sg  to  a  many-sorted  -  order  predicate- 
function  calculus .  It  is  believed  that  many  of  the  problems  attendent 
to  mechanizing  a  many-sorted  calculus  are  resolved  by  Sg  .  A  careful 
treatment  of  the  matching  process  has  not  however  as  yet  been  carried 
However  no  insurmountable  obstacles  are  expected. 


out  far  S-  . 


0.  Introduction 


It  is  the  opinion  of  this  writer  and  his  colleagues  (J.  H.  Bennett, 
W,  B,  Easton,  and  T.  H.  Mott,  Jr.)  at  the  Applied  Logic  Corporation, 
that  no  computers  in  the  near  future  will  be  powerful  enough  to  carry 
out  any  non- trivial  deductive  mathematics .  This  does  not  preclude  the 
possibility  of  doing  serious  mathematics  by  real-time  operator-mathe¬ 
matician  intervention.  Such  a  program  we  have  dubbed  semi-automated 
.mathematics  (SAM) .  The  purpose  of  this  report  is  to  describe  some 
algorithms  which  are  useful  for  the  automated  portion  of  JAM .  These 
algorithms  can  be  "read-off"  from  the  definition  of  proof  in  the  formal 
systems  Sj  through  Sg  described  in  Sections  1-6, 

Some  history  is  in  order.  We  quickly  realized  that  the  method 
of  mathematical  logic  known  as  natural  deduction  by  subordinate-proof 
(cf.  Fitch  [ll  or  Jaskowski  (2!  )  is  a  convenient  way  to  display  mathe¬ 
matical  proofs .  This  convenience  holds  for  both  the  man  and  the  machine , 
Two  programs  were  written  for  the  IBM  162G  using  this  method.  The 
first  program,  SAM  I  (cf.  I3I ),  handled  the  propositional  calculus  on  a 
semi-automated  (man-machine)  basis.  The  second  program,  SAM  III 
(cf,  £4]),  treated  semi-automatic  u'-order  predicate-function  calculus 
with  equality  and  methods  of  definition, 

A  method  called  matching  for  efficiently  applying  (upon  command 
of  the  man)  rules  of  inference,  definitions,  axioms,  and  previously 
proved  theorems  was  developed  for  another  IBM  1620  program,  SAM  II. 


SAM  II  (cf,  )  was  a  system  for  semi-automatic  first-order,  quan¬ 
tifier-free,  (constant)  function,  axiomatics  with  equality  and  methods 
of  definition.  Matching  was  also  used  in  SAM  III.  In  SAM  III  we  added 
some  automatic  techniques  of  the  following  form.  In  the  middle  of  an 
incomplete  subordinate  proof  we  may  be  attempting  to  prove  a  formula  B 
from  previously  proved  theorems  and  relevant  hypotheses  Cj ,  C^,  . • , ,  Cn. 
The  machine  attempts  to  prove  this  automatically  by  creating  the  set  S 
consisting  of  Cj ,  . . . ,  Cn  and  some  denial  of  B  ,  and  then  trying  to 
reduce  S  to  a  contradiction.  Matching  is  used  in  the  reduction  of  S  . 
Also  certain  equality  rules  were  automated  for  this  reduction.  The  method 
of  handling  the  propositional  connectives  in  this  reduction  is  explicated 
by  the  systems  Sj  and  S2  below.  The  method  of  stripping  quantifiers, 
called  Skolemization.  for  the  reduction  of  S  ,  along  with  matching  are 
described  in  S3  ,  S4  is  the  completion  of  S3  to  the  full  first 
order  predicate-function  calculus  without  equality.  S3  extends  S4 
to  the  *r-  order  predicate-function  calculus  and  includes  the  rudiments 
of  type  theory.  The  main  difficulty  in  extending  to  S3  is  in  giving  an 
adequate  definition  of  matching.  If  portions  of  matching  in  S3  were 
restricted  and  some  equality  rules  were  added  to  S3  ,  we  would  have 
approximately  the  automatic  portion  of  SAM  III. 

The  system  Sg  is  tendered  as  a  solution  of  the  "sorted-symbol" 
problem.  In  intuitive  mathematics  we  use  certain  personal  conventions 
concerning  variables  ranging  over  certain  mathematical  objects.  For 


example ,  m  ,  n  ,  i  ,  j  frequently  range  over  integers;  p  ,  q 

i  _ 

over  primes;  r,  s,  t  over  rationals;  x  ,  y  over  reals; 

G  over  groups;  H  over  sub-groups;  etc.  Also  we  connect  various 
related  objects  in  a  mathematic  structure  by  the  process  of  identication. 
E,  g.  if  G  is  a  group  with  composition  f  ,  then  we  might  use  to 
range  over  subgroups  of  G  .  However  with  no  qualms  at  all  we  call 
the  composition  of  each  of  these  subgroups,  l  .  After  all,  only  a  pur¬ 
ist  considers  the  restriction  of  a  function  to  be  a  different  function. 
Unfortunately,  computers  are  purists.  Also  we  want  theorems  concern¬ 
ing  rational  numbers  to  be  available  to  integers  without  intervention  by 
the  man.  All  these  problems,  at  least  theoretically,  are  resolved  by 

S6  * 

No  attempt  has  been  made  to  consider  automatic  equality  rules 
in  this  report.  Hopefully,  this  can  be  the  subject  of  a  later  report. 
Handling  the  equality  rules  in  a  manner  which  allows  us  to  do  "trivial” 
mathematics  automatically  may  be  the  last  serious  theoretical  hurdle 
before  some  serious  mathematics  can  be  developed  on  a  computer  using 
SAM. 

Notation.  Throughout  this  report  we  shall  use  the  following  notations 
and  conventions, 

1)  Ij.  will  denote  provability  in  system  . 

2)  B,  C,  D,  B|,  G|  ,  Dj  ,  B2  ,  will  be  metamathe- 
matical  symbols  ranging  over  the  well-formed  formulas  {«  ffs) 


I 

or  well-formed  terms  (Wfts)  of  a  given  system. 

3)  Formulas  such  as  B  (Cj  ,  ,.„Gn)  will  denote  a  wff  where 
attention  is  drawn  to  all  occurrences  of  the  wffs  Cp . . Cn 
which  appear  as  subformulas  of  B. 

4)  Formulas  such  as  B  (. . .  G  . . .)  will  denote  a  wff  where  atten¬ 
tion  is  drawn  to  a  particular  single  occurrence  of  a  subformula 
C  of  B. 

i 

5)  The  usuai  rules  for  associating  the  connectives,  dropping  paren¬ 
theses,  or  replacing  pairs  of  parentheses  by  dots  will  be  ob¬ 
served. 

6)  Frequently  we  will  not  explicitly  name  certain  variables  but 
only  give  names  to  metamathematic  symbols  which  range  over 
the  variables  of  a  given  system. 

7)  After  the  final  clause  of  an  inductive  definition  in  the  meta¬ 
language,  consider  as  added  a  clause  reading  that  an  object  is 

in  the  class  defined  if  its  being  so  follows  from  a  finite  number  of 
applications  of  the  above  clauses.  E.g.  in  the  definition  of 
wfr  for  Sj  we  understand  as  present  a  fourth  clause  reading. 

’*4)  A  string  of  primitive  symbols  of  is  a  well -formed 

formula  of  Sj  ,  only  if  its  being  so  follows  from  finitely 
many  applications  of  1),  2),  and  3)  above.“ 


-  4  - 


1.  The  Formal  System 

The  system  formalizes  a  fragment  of  the  propositional  cal¬ 
culus,  By  itself  is  of  little  interest.  However  Sj  lends  itself 
to  efficient  mechanization  and  is  a  sub-system  of  the  more  powerful 
systems  S2  ,  S3  ,  S4  ,  S5  ,  and  Sg  . 

Primitive  symbols  of  Sj  : 

1)  Propositional  constants  T  F 

2)  Propositional  connectives  &  v  3  as 

3)  Improper  symbols  )  ( 

4)  An  infinite  list  of  propositional  variables.  We  shall  use 

p,  g  ,  r,  pi  ,  ....  as  metamathematical  names  ranging 
over  the  propositional  variables. 

5)  We  use  B  ,  C  ,  B1  ,  ,  B2  ,  ...  to  range  over  wffs  of  S1 

Well-formed  formulas  (wffs)  of  Sj  : 

1)  A  propositional  variable  standing  alone  is  a  wff. 

2)  T  and  F  are  wffs. 

3)  If  B  and  C  are  wffs  then  so  are  ~  B  ,  (B  v  C)  ,  (B  &  C)  , 

(B  9  C)  ,  and  (BSC). 


i 


1 

> 

’ 


A 


f 
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Theorems  of  Sj  .  A  finite  sequence  ,  B^?  ,  / 

(fif  ,  ...  ,  }  of  finite  sets  of  wffs  of  is  said  to  be  a 

proof  of  the  theorem  B  if 

1)  nj  =  1  and  B^  is  *»B  , 

2)  some  b|^  is  F  ,  and 

3)  some  b|^  is  p  (resp.  **  p  )  and  £Bj  +  . . . ,  Bn  ^  +  ^  is 

(j)  1 

obtained  from  the  previous  set  by  deleting  the  By,  '  s  which 
are  p  (resp.  <*.  p)  and  replacing  all  the  occurrences  of  p 


in  the  remaining  set  by  T  (resp.  F)  ,  or 

J  jj^  +  ^  B0  +  1)  i 


I  -  *  *  *  •  # 


7+1 


is  obtained  from  the  previous 


set  by  replacing  one  (or  tw<$of  the  B;J  's  by  wffs  using  one 


of  the  reduction  rules  below. 


Reduction  rules  for  Sj  : 

1)  Replace  B  &  C  by  B  and  C. 

2)  Replace  *(B?C)  by  B  and  *C, 

3)  Replace  *(B  v  C)  by  *-B  and  ^C, 

4)  Replace  any  of  B  ( ,.  )  ,  B  (  . . .  ,T  a  C  . . .)  , 

B  (,,.  F  v  C  i..)  ,  B(...  CvF  ...)  ,  B  (  . . .  T  &  C  . . .)  , 

B  (...  C  &  T  ,  B  (...  T  *  C  ...)  ,  or  B(...C=T...) 
by  B  (. .  ,C  . . .)  . 

5)  Replace  any  of  B(...C»F...)  ,  B(...F*C,,.)  ,  or 

B(...  Cs  F  by  B{...  . 
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g)  Replace  any  of  B  (  .  • .  F  »  C  . . .)  ,  B(...C^T...)# 

* 

B(.i.TvC...),  B  (  ...  C  v  T  ...)  ,  or  B  F  ...  ) 

by  B  (. . .  T  . * .)  • 

7)  Replace  any  of  B(,..F  &  C...),  B(...C  &  F...)» 

or  B  (. . .  ^>  T  . . .)  by  B(...F  ...)• 

By  way  of  example  we  prove  some  theorems  in  : 

*1  T 

Proof:  T  3  • 

^  P  ^  P 

Proof:  $  ~  .  P  ?  P  1  ,  $p,~p?,  , 

^  F  }  .  Alternatively  we  could  use  the  proof 

!~.p5p]  *  £p,~p1  *  £  F  ^  * 

p  S.  q  =>  P 

Proof:  j/*.P  3.  q  3p]  <  5P' 

{p,q-~p}  *  Sf'cj}* 

p  »  (q»r)  p^q  =»•  p=>r 

Proof:  $  *.  .  p  a  (  q  ■>  r  )  p.  P  =>  a  PJr  1 . . 

jp-?(q0r),ppq,  P  .  -  r  }  ,  $T  D  (  q  3  r  )  ,  Toq,  *r  ] 
jqM,  T  5  q  ,  ^r}  ,  $q?r  ,  q  ,  ~r]  ,  \T  o  r  ,  ~r  1 

Sr  ,  *  rl  ,  }  , 
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p  9  «*q  9*  q  9  p 


Proof: 


9  *q  # 
$*p  9  F  , 


[a^p  9*5  9»  q  9  i  *  *  *  *  i 

i  ,  ** p  7 ,  5^p  ^ ~t  ,  *? } , 

)  »  f**?  /  *pli  ....j  1  • 


Remark:  As  is  well  known,  the  last  three  theorems  are  frequently 

taken  as  the  axioms  along  with  modus  ponens  and  substitution  for  a 
development  of  the  propositional  calculus  in  terms  of  only  »  and  a*  . 
However  we  do  not  have  modus  ponens  as  a  rule  or  as  a  derived  rule  of 
Sj  since  for  example  p  o  p  »q  9.  p»p»r  *».q  r  is 
tautologous  but  not  a  theorem  of  S}  .  In  fact  substitution  is  not  a 
derived  rule  of  Sj  since  l»  psp  ,  while  p  s  q  z».  p  a  q  is 
not  a  theorem.  Notice  that  no  wffs  of  the  forms  B  &  C  ,  B  &  C  , 
a.  (B  9  C)  ,  and  v(B  v  C)  are  theorems  of  S^.  While  not 
every  tautology  is  a  theorem  we  have  the  converse: 

Theorem .  Every  theorem  of  is  a  tautology. 

Proof:  Let  ^Bi , .  Bm  1  be  obtained  from  Cn  1 

by  one  application  of  the  reduction  rules.  Then  (B}  &  ...  &Bm  )  S 
(Ci  &  ...  &  Cn  )  is  tautologous  as  can  be  seen  by  examining  each  of 
the  reduction  rules.  Hence  if  B  is  a  theorem  of  we  have  *-B  •  F  , 
and  therefore  B^  is  tautologous. 


Remark.  Notice  that  the  theorems  of  Sj  are  exactly  those  tautologies 
B  which  can  be  proved  tautologous  by  assigning  F  to  B  and  arriving 
at  a  contradiction  using  only  the  uniquely  determined  lines  of  the  truth- 
tables  of  the  connectives  and  not  treating  any  propositional  variables  or 
subformulas  by  cases. 


2.  The  Formal  System  $2 


The  system  S2  is  obtained  from  by  modifying  the 
definition  of  proof  of  a  theorem. 

Theorems  of  S2  :  A  finite  sequence  ,  Bn  of  wffs 

of  Sj  is  said  to  be  a  proof  of  Bn  in  the  system  S2  if  for  each 
i  ( I  =  1  ,  2  n)  Bi  is  a  theorem  of  S1  or  there  are  j 

and  k  (  1  j  ^  i  and  1  k  *  i  )  such  that 
Bj  is  p  ?  Bj  and  Bk  is  p  3  Bj  . 

Examples: 


^  PSP 


Proof: 

P  ■*.  P 

«■ 

P  . 

by 

i*"P 

>  p 

=5  P  ?  , 

{ p. 

"-•PS 

p}  ,  f 

T 

*  T 

# 

)  - 

T  1  , 

f  f]  , 

Also 

^  «P9.  pip  ; 

by 

s* 

««p  O. 

p * 

P  1 

t 

f  ~ 

P  1  *"P 

5  P  1  1 

$ 

T  s  T  : 

f  , 

j  ~  -v  F  1  , 

1 

F  }  . 

Hence  p 

at 

p  *  p 

,  ~P 

3.  p 

9  P  , 

PSP 

is  a  proof  of  p  S  p  in  S2  . 

\  P  9.  p  ?  q  S  q 

Proof:  It  is  easily  checked  that  first  four  wffs  of  the  following 
sequence  are  theorems  of  Sj  : 

P  d  p  p  ^  q  ^  q  ,  *  p  s>  q  ?.  p  ?.  p  a  q  «  q  , 

p  D,  -q  o.  p  =>,  p  ^  q  =  q  ,  ~  p  *q  •?.  p  ■?.  p  q  3?  q  , 
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q  P  p»q«q  ,  ^  q  9.P  5,  p  ?q  =  q  ( 

p  s>.  p  »  q  m  q  .  Hence  this  sequence  is  a  proof  of 
p  ?.  p  ?  q  *  q  in  . 

This  proof  is  unnecessarily  long.  Suppose  we  attempt  to  prove 
this  wff  in  .  We  have  o.  ppqsq]  ,  f  p  ,*-P  »q  s  q  I  , 

i  t  9  q  «  q  }  ,  q  sql 

but  we  can  proceed  no  further.  However,  we  observe  that  we  need  only 
treat  this  last  set  by  cases  on  q.  This  suggests  the  following  shorter 

proof  of  the  original  wff  in  S2  :  q  p  p  •=>  q  ®  q  , 

q  p  o.  p  ©  q»(|  j  p  p.  p  ?q  s  q  where  indeed  the  first  two 

wffs  are  theorems  of  S1  as  can  be  easily  checked. 

The  longer,  "canonical"  proof  of  the  example  immediately  above 
suggests  the  following  completeness  theorem  for  S2  : 

Theorem.  The  theorems  of  S2  coincide  with  the  tautologous  wffs 
of  S2  . 

Proof:  That  every  theorem  of  S2  is  tautologous  is  easily  observed 
from  the  facts  that  the  theorems  of  Sj  are  tautologous  and  if  p  p  B 
and  -v  p  5  B  are  teutologous  then  so  is  B  . 

On  the  other  hand  suppose  B  (  pj  ,....,  pn  )  is 
tautologous  and  contains  only  the  propositional  variables  pj  ,....,  pn  . 
Then  pj  ?  .  p2  5 .  ...  3 .  pn  ^  B  where  p^  is  either 

Pi  or  ~  pj  ,  will  be  provabl?  i.i  Si  with  the  proof 
l  ^  ^  •  Pf]  B  X  t  •  •  *  #  g  *  Pj  #  P2  #  *  *  *  *  #  Pfj ;  ^  ® 

^  P2  #  *  *  •  *  t  f  **  B  (  ^  ^  t  P2  t  *  *  *  *  »  Pj^  )  1  #  ••••  , 
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i  ^  B  (  t  j  ,  *r  2  '  ****  '  ^  n  )  1  ,  $  F  |  , 

where  “f  j  is  T  or  F  according  as  is  or  a.  pj  . 

Now  combining  the  2n  differed  theorems  of  of  the  form 

Pi  *•  P2  9 .  Pn  °  ®  we  obtain  B  as  theorem  of  S2 

from  a  proof  with  2n  +  *  -  1  wffs  in  the  obvious  fashion. 

The  shorter  proof  of  p  »  .  p  3  q  =  q  suggests  that  fre¬ 
quently  we  can  find  a  proof  of  a  tautology  with  n  propositional  variables, 

n  +  l 

which  has  a  length  considerably  shorter  than  the  2  -  i  steps  needed 

in  the  "canonical"  proof.  This  is  a  Common  occurrence  in  mathematics; 
but  all  too  often  some  collection  of  heuristic  shortcuts  that  a  mathematician 
uses  can  not  be  formalized.  However,  in  this  case  we  have  constructed 
and  S2  so  that  the  shortcut  is  easily  mechanized.  This  is  de¬ 
scribed  by  the  following  definition,  theorems,  and  examples; 

Definition.  Let  B*  be  the  last  set  of  a  finite  sequence  of  finite  sets 
of  wffs  satisfying  1),  3)  ,  and  4)  of  the  definition  of  a  theorem  of 
and  such  that  B*  either  contains  F  or,  it  contains  no  formulas  of 
the  forms  p  or  ~  p  and  no  reduction  rule  is  applicable  to  B*  . 

For  definiteness  let  us  suppose  further  that  in  this  sequence  of  sets, 

3)  was  applied  where  possible  before  4)  ;  and  where  more  than  one 
application  of  3)  (reso.  4)  )  was  possible  the  application  first  effected 
was  the  one  which  eliminated  the  left-most  p  or  ~p  (respectively,  con¬ 
nective),  considering  the  sets  as  ordered  sets  in  the  natural  way. 
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Theorem.  Let  3  be  a  tautology.  Let  m  be  the  number  of  dis¬ 
tinct  variables  in  B*  .  Then  there  is  a  proof  of  B  in  S2  of  lengin 
2r''  +  l-  1  . 

Proof:  Let  q^  ,  q2  ,  ....  ,  qm  be  the  m  variables  in  B* 

Then  clearly  qj  3 . o.  qm  z>  B  is  provable  in  Sj 

where  q^  is  q^  or  -v  q^  .  Now  proceed  as  in  the  preceding 
theorem . 


Examples. 


P  P  ">  q  S  q  (B) 

Proof:  Now  B*  is  $<*..q  sq]  so  that  q  *.  p  ?  p  9q  5  q  , 
vq  pq  poq  *  q  ,  p  p  )  q  s  q  is  the  proof  of 
length  2  1  +  1  -  1  =3  indicated  by  the  last  theorem.  From  a  compu 

tational  standpoint  it  is  much  more  efficient  to  combine  the  proofs  of 


q  p  ».  psq  rq  and  *.  q  *  p  p  ■»  q  a  q  in  S  ^ 

along  with  the  proof  of  length  3  in  into  the  following  computa¬ 
tional  scheme: 


f^p>  psq  ?  q  1 
l 

5  P  ,*-P  q  m  q  1 

I 

1*'  T?qsq  ] 

S  \ 

T  5  T  S  T  ]  j  T  >  F  =  F  1 

»  I 

f~.  T  s  Ti  [a-.  F  1  F  1 


\  ~t! 


I„~f1 


i  F? 
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As  is  frequently  the  case  with  branching  structures,  this  display  can 
be  efficiently  mechanized  by  a  push-down  list  arrangement. 

V*2  pS  (q  =  r)  —  •  P  q  m  t 

Proof:  This  tautology  generates  the  following  computational 
scheme: 

f  -v.  p  *  (q  «  r)  *.  P  h  q  S  r  T 
^.Ts(qsr)  «.  q»r]  f-F  »  (q  *  r)  =.  F  ar  q  «■  r  7 

1  *  I 

(q  9  r)  S.  T  «  q  3  r  f  J 

I  z 

^  /u.  (q  2  r)  s. .  q  g  r  > 

U.  T  *  r  ».T  «  r 7  ^-F  s  ra.F  »  rl 

1  | 

\  ,v.  r  *.T  s  r  1 

i  7  : 

\  r  «  r  f 

/  \ 

T  a  T  ]  Wf  ®  F  ] 

^  T  1  $w-F  } 

t  t 

it* 

Note  that  in  this  case  no  rules  from  are  applicable  so  that  our 
computational  scheme  degenerates  into  the  truth-table  procedure.  This 
is,  however,  preferable  to  proving  eight  longer  theorems  in  S1  and 
combining  them  to  make  a  proof  in  $2  with  fifteen  steps. 
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One  of  the  most  efficient  algorithms  for  the  propositional  cal¬ 
culus  arises  from  Gentzen's  system  of  natural  deduction  (cf.  Kleene's 
Qe3  system  Gl,  p,  442).  The  reduction  rules  1)  ,  2)  ,  and  3)  corre¬ 
spond  respectively  to  &  — ,  — »  "O  ,  and  — >v  . 

The  special  case  of  B(,..C...)  replacing  B  (. .  .*v^C. . .)  where 
B(...C...)  is  just  C  corresponds  to  — followed  by 
Notice  that  all  of  these  rules  are  non-branching  rules  of  Gl ,  Also 
certain  applications  of  the  branching  rules  of  Gl  are  essentially  non¬ 
branching.  E.g.  t>— *>  ,  where  the  antecedent  of  the  implication  to 
be  eliminated  is  also  a  hypotheses  could  be  replaced  by  a  special  non- 
oranching  rule  (for  $  D,  DOCl  is  equivalent  to  {D,  c}  ). 

This  corresponds  roughly  to  the  reduction  rule: 

"replace  B(  ,..T3C  ...)  by  B(...C...)  ." 

On  one  hand  our  reduction  rule  is  more  general  since  C  may  be  buried 
quite  deeply  in  B  (. .  .0. . .)  ,  while  on  the  other  hand  we  may  have 
the  formulas  D  and  D  »  C  and  not  be  able  to  get  TOC  from  this 
in  Sj  (e.g.  pop  and  p  o  p  ^  C)  .  We  do  not  choose  to 
modify  Sj  to  include  some  rule  which  would  get  us  from  $D  ,  D  o  cl 
to  |d  ,  To  cl  for  reasons  of  computational  efficiency. 

In  essence  then  Sj  does  almost  all  possible  non- branching  in¬ 
ferences  thus  eliminating  much  of  the  branching  necessary  in  Gl. 

Only  as  a  last  resort  —  thus  invoking  So  — -  are  branching-type  rules 


used.  And  in  fact  the  branching  used  in  Sg  tends  to  eliminate  further 
branching.  Of  course  for  some  examples  our  method  corresponds  almost 
exactly  to  the  truth- table  method.  E.g,  see  the  proof  of 
Pi  (q  =  r  )  %  ,  psqsr  in  the  example  above.  However  the  natural 
deduction  method  is  similarly  a  disaster  in  thes^  freak  cases.  In  gen¬ 
eral  our  method  seems  to  be  more  efficient  than  natural  deduction  which 
in  general  is  considerably  more  efficient  than  the  direct  truth-table 
method.  And  further,  the  method  of  S£  lends  itself  very  nicely  to  ex¬ 
tension  to  the  higher  order  calculi. 

Considering  again  the  remark  at  the  end  of  Section  1 ,  the  method 
of  S2  corresponds  exactly  to  the  method  of  assigning  F  to  a  tautology 
and  using  the  uniquely  determined  lines  of  the  truth-tables  and  then  by 
cases  on  the  propositional  variables  when  necessary,  in  order  to  derive 
a  contradiction.  On  the  other  hand,  the  cut-free  version  of  G1  corre¬ 
sponds  exactly  to  the  method  of  assigning  F  to  a  tautology  and  using  the 
uniquely  determined  lines  of  the  truth- tables  and  then  by  cases  on  the 
two  halves  of  a  subformula  using  the  other  lines  of  the  truth-table. 

(E.g.,  A  o  B  is  T  is  contradictory,  if  and  only  if,  A  is  F  is  con¬ 
tradictory  and  B  is  T  is  contradictory.) 
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The  system  S3  is  a  fragment  of  the  first  order  predicate  cal¬ 
culus  with  symbols  for  both  predicates  and  functions  but  without 
equality.  This  system  is  introduced  so  that  the  techniques  for  handling 
quantifiers  and  the  instantiating  of  hypotheses  can  be  explained  in  the 
simplest  possible  setting.  The  propositional  portion  of  S3  is  an  evi¬ 
dent  generalization  of  Sj  .  Techniques  for  handling  the  equality  rules 
will  be  discussed  later. 

Primitive  symbols  of  S^  : 

1)  -  3)  As  in  Sj  ,  with  the  comma  as  an  additional  improper  symbol. 

4)  Quantifiers  A  E 

5)  An  infinite  list  of  individual  variables. 

6)  An  infinite  list  of  individual  constants. 

7)  An  infinite  list  of  predicate  constants  of  each  "ree  n 

( n  *  1  ,  2,  3,...). 

8)  An  infinite  list  of  function  constants  of  each  du-jre*  n 

(n  -  1  ,  2  3  ,  . . .  )  . 

Remark:  We  use  the  following  symbols  in  the  metalanguage  of  : 

1)  individual  variables  x  y  z  Xj  .... 

2)  individual  constants  a  b  c  d  e  a^  .... 

3)  n-ary  predicate  constants  P^  Q ^  Q,^  •••• 
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4) 


n-ary  function  constants 


G(n)  H(n)  j(n)  q(  n)  H^(n) 

5)  well-formed  terms  M  N  Nj  M2  .... 

6)  well-formed  formulas  B  C  D  Cj  .... 

When  no  ambiguity  arises  we  will  drop  the  superscripts  on  the  predi¬ 
cates  and  functions. 

Well-formed  expressions  of  Sg  : 

1)  Individual  variables  and  individual  constants  are  well- formed 
terms  (wfts) . 

2)  If  Mi  .....  Mn  are  wfts  and  is  an  n-ary  function 

constant  then  (Mj  . . ,  Mn  )  is  a  wft. 

3)  If  Mj . .  Mn  are  wfts  then  P(n)(Mx  .....  Mn )  is 

a  (atomic)  well-formed  formula  (wff). 

T  and  F  are  (atomic)  wffs. 

The  variables  occurring  in  atomic  wffs  are  said  to  occur  free. 

If  B  and  C  are  wffs  then  so  are  (B^C)  ,  (B  &  C  )  , 
(BvC)  ,  (B  *  C),  and  .  The  various  which 
free  in  B  and  C  are  free  in  (  B  ?  C )  .  (  B  &  C  }  , 

(  B  v  C  )  .  and  (BBC)  .  The  variables  free  in  B  are 

free  in  ^  B  .  If  B  is  a  wff,  so  is  (  Ax  )  B  and  (Ex  )  B  , 

Occurrences  of  x  in  (Ax  )  B  arc  called  bound  occurrences 
of  x  and  those  occurrences  of  x  which  are  free  in  B  are 
said  to  be  bound  by  the  initial  quantifier  of  (  Ax  )  B  or  (  Ex  )  B 
Free  vaiiahles  of  B  other  than  x  are  free  variables  of 
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(  Ax  )  B  and  (  Ex  )  B  which  are  said  to  be  in  the  scope  of 

i 

the  initial  quantifier. 

In  S|  we  proved  a  wff  B  by  attempting  to  derive  F  from 
B  In  Sg  we  proceed  analogously—  however ,  in  place  of  the 
negation  of  a  wff  we  use  a  quantifier-free  wff  which  contains  the 
intent  of  the  denial  of  the  wff .  To  this  end  we  define  a  quantifier- 
free  form  of  a  wff  . 

Definition.  Let  B°  —  called  the  Skolemizatlon  of  B  (where  B  is 
a  wff  containing  no  free  variables)  —  be  the  formula  obtained  from  B  , 
by  successively  applying  the  following  reduction  rules  (the  applicable 
rule  appearing  earliest  in  the  list  is  applied  first): 

jj  Replace  subformulas  of  the  form  A"VC  ,  a.  (C  ^  D  )  , 

«w  (  C  v  D  )  ,  *  (C  &  D  )  ,  C  =>  D  ,  C«D, 

a,  (C  =  D)  ,  -  (Ax)  B  ,  and  MEx)  B  respectively 

by  C  ,  C  &  ~  D  ,  ~  C  &  ~  D  ,  ~Cv  ~D, 

~Cv  D  ,  (  <*-CvD)  &  (Cv  *■  D  )  ,  (CvD)  & 

(  a.  C  v  a.  D  ) ,  (Ex)  a.  B  ,  and  (  Ax  )*B  . 

2)  Replace  subformulas  of  the  form  (  Ax  1  B  and  (  Ex  )  B  by 
B  if  x  is  not  free  in  B  . 

3)  Replace  subformulas  of  the  form  (  Ax  )  .  B  (x)  &  C  (x)  and 

(  Ex  )  .  B  (x)  v  C  (x)  respectively  by  (  Ax  )  B  [>:}  £  (Ay)  C  (y) 

and  (  Ex  )  E  (x)  v  {  Ey  )  C  (y)  where  y  is 


file  first  variable  in  alphabetic  ordering  not  previously  appear¬ 


ing. 

4)  Replace  subformulas  of  the  form  (  Ex  )  ,  C  &  D  ,  (Ex)  .  D  &  C  , 
( Ax  )  .  C  v  D  ,  and  (  Ax )  .  D  v  C  respectively  by 

{  Ex  )  C  &  D  ,  D  &  (  Ex  )  C  »  (Ax)CvD,  and 

D  v  {  Ax  )  C  where  x  is  not  free  in  D  . 

5)  Replace  subformulas  of  the  form  (  Ax  )  B  (x)  by  (  Ay  )  B  (y) 

if  some  quantifier  binding  x  appears  to  the  left  of  (  Ax  )  B  (x)  , 

where  y  is  the  first  variable  in  alphabetic  order  not  pre¬ 
viously  appearing. 

(Here  and  below  the  x's  displayed  in  B  (x)  are  all  the  free 
occurrences  of  x  .  ) 

6)  Replace  subformulas  of  the  form  (  Ex  )  B  (x)  which  is  not  in 

the  scope  of  a  universal  quantifier  by  B  (a)  ,  where  a  is 
the  first  individual  constant  in  alphabetic  order  not  previously 
appearing . 

7)  Replace  subformulas  of  the  form  (  Ex  )  B  (x)  by  B  (G^n'  (y^  , 

. . . .  yn  )  )  where  y^  ,  . .  ,  yn  are  all  and  only  the  variables 

bound  by  universal  quantifiers  in  whose  scope  this  particular 
occurrence  of  (  Ex  )  B  (x)  appears,  where  is  the  first 

n-ary  function  constant  not  previously  appearing. 

8)  Replace  subformulas  of  the  form  (  Ax  )  B  by  B  . 
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Example ,  Let  us  compute  the  Skolemization  of 
(Ex)  (Ay)  .  (Ax)  P  (y,x)  3  (Ez)  Q  (z,  x,  y)  ,  The  steps  are 

a)  (Ex)  (Ay)  .  (Ex)  ~  P  (y,  x)  v  (Ez)  Q  (z,  x#  y)  ,  by  1)  twice; 

b)  (Ay)  .  (Ex)  **  P  (y,  x)  v  (Ez)  Q  (z,  a,  y)  ,  by  6); 

c)  (Ay)  .~P  (y,  G(y)  )  v  Q(H  (y)  ,  a,  y)  ,  by  7)  twice;  and 

d)  P  (y,  G(y)  )  v  Q  (H(y)  ,  «,  y  )  ,  by  8), 

where  d)  is  the  required  Skolemization.  Here  and  below  let  us  assume 
that  the  symbols  represented  comply  with  the  requirements  of  alphabetic 
ordering.  Note  that  a)  is  equivalent  to  the  original  formula  using  the 
usual  meaning  of  ?  ,  v  ,  ,  (Ex)  and  (Ax)  . 

In  b)  we  have  replaced  the  initially  existentially  quantified  variable 
by  a  previously  unused  constant —  a  device  in  common  use  in  informal 
mathematics.  In  c)  we  have  replaced  x  in  P  (y,  x  )  by  G  (y) 
where  G  (y)  is  to  be  the  name  of  the  object  x  which  is  said  to  exist 
for  each  choice  of  y  ,  Since  G  did  not  appear  previously,  G  (y) 
gives  us  no  additional  information  beyond  the  existence  the  object  for 
each  y  .  Similar  statements  hold  concerning  H  (y)  .  In  d)  we 
simply  delete  the  universal  quantifier.  By  this  informal  reasoning  we  see 
that  a  contradiction  can  be  obtained  from  the  original  wff  if  and  only 
if  it  can  be  obtained  from  its  Skolemization  d)  .  Examination  of  the 
definition  of  Skolemization  leads  us  to  make  this  assertion  for  general 
closed  (no  free  variables)  wffs. 

I 

i 
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In  modifying  the  definition  of  a  theorem  for  to  serve  for 
Sj  we  can  modify  clause  1)  so  that  is  the  Skolemization  of 

^(Axj) .... (Ax^)  B  where  Xj,  x  are  all  the  free  variables 

of  B  ,  Clauses  2)  and  4)  can  remain  the  same.  Of  course  the  re¬ 
duction  rules  involving  s>  and  s  are  not  needed.  In  clause  3) 
we  use  atomic  wffs  in  the  role  of  the  propositional  variable  p  . 

Since  the  free  variables  occurring  in  the  subformulas  of  the  Skolemized 
wff  were  previously  bound  by  the  deleted  universal  quantifiers ,  we 
must  allow  ourselves  all  substitution  instances  of  these  quantifier-free 
wffs  in  our  attempt  to  derive  F  .  However,  it  is  much  too  inefficient 
to  blindly  generate  instances  of  these  wffs.  Suppose  B  and  C 
are  atomic  formulas.  Note  that  an  instance  of  <vB  v  C  ,  call  it 
-v  B’  v  C'  ,  will  be  of  use  only  if  there  is  some  previously  gener¬ 
ated  wff  D  (or  **  D)  and  an  instance  D'  of  D  (or  ~  D'  of  —  D) 
such  that  D'  is  either  B'  or  C'  .  So  that  rather  than  generate 

all  possible  **B'  v  C*  's  and  D'  's  it  is  much  more  efficient  to 
consider  vC  and  D  (or  » D)  to  see  if  D  and  B  (  or 

D  and  C)  have  a  common  substitution  instance  (called  a  matching 
formula  below).  Further,  it  is  important  that  this  common  instance  be 
as  general  as  possible.  These  ideas  lead  us  to  the  notion  of  matching, 
which  was  developed  for  SAM  II 

Definition.  Two  wffs  of  are  said  to  match  if  they  have  some 

substitution  instance  (called  a  matching  formula)  in  common.  A  matching 
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formula  from  which  every  other  matching  formula  can  be  obtained  by 
suostitution  is  called  a  general  matching  formula. 


Examples;, 

1)  Q  (a,  x)  and  Q  (x,  H(x)  )  match  and  have  Q  (a,  H(a)  )  as 
a  general  matching  formula. 

2)  P  (G  (a,  x)  )  and  P  (G(b,  y)  )  do  not  match  since  the  con¬ 
stants  a  and  b  do  not  match. 

3)  Q  (x,  x)  and  Q  (y,  H(y)  )  do  not  match  since  y  and 
H(y)  cannot  be  made  identical  by  replacing  y  by  the  same 
wft  in  both  y  and  H(y)  . 

4)  Q  (x,  y)  and  Q  (y,  x)  match  and  have  Q  (x,  x)  as  a 
matching  formula.  Q  (x,  x)  is  not  a  general  matching  formula 
since,  for  example,  Q  (x,  y)  is  a  matching  formula  which  is 
not  an  instance  of  0  (x,  x)  .  Note  that  in  this  case  Q  (x,y) 
and  Q  (y,  x)  are  both  general  matching  formulas. 

Definition.  The  following  algorithm  which  is  to  be  applied  to  two 
atomic  wffs  B  and  C  of  S3  is  called  matching: 

gtep  f;  Consider  B  and  C  as  being  stored  at  lines  (1)  and  (2) 
respectively.  Reletter  the  variables  of  line  (2)  so  that  it  has  no 
variables  in  common  with  line  (1). 


Step  2: 


Let  us  denote  the  n-th  symbol  —  ignoring  parentheses  and 


commas  —  of  line  (1)  by  (l)n  .  Similarly  we  define  (2)n  , 

Case  a):  If  lines  (1)  and  (2)  are  identical,  the  algorithm  outputs 
(1)  and  stops. 

Case  b):  Suppose  n  is  the  smallest  integer  such  that  (l)n  is  dif¬ 
ferent  from  (2)n  .  Since  wffs  are  involved  and  case  a)  does  not  hold, 

neither  (l)n  or  (2)n  can  be  vacuous.  We  consider  four  subcases: 


i)  Suppose  (2)n  is  a  variable,  say  x  ,  while  (l)n  is 

a  function  or  individual  constant.  Then  call  D  the 
unique  subformula  of  (1)  starting  at  (l)n  .  If  D 
contains  x  ,  output  DOES  NOT  MATCH  and  stop. 

If  D  does  not  contain  x  ,  substitute  D  for  x 
everywhere  in  (1)  and  (2)  .  Go  back  and  repeat 
step  2. 

ii)  Proceed  as  in  i)  if  the  roles  of  (1)  and  (2)  are  inter¬ 
changed. 

iii)  If  {l)n  and  (2)n  are  different  variables,  replace 

(2)n  everywhere  in  (1)  and  (2)  by  (l)n  . 

iv)  If  (l)n  and  (2) n  are  different  constants,  output 

DOES  NOT  MATCH  and  stop. 


Examples.  Let  us  apply  matching  to  P(G(G(x,  G(y,  x)) ,  z})  and 


P(G(G(x,y),  G(x,y)))  . 


(1)  PGG  x  G  y  x  z 

(2)  PGG  uvG  uu 


\ 

\ 

1 

l 


(1)  PGG  x  Gy  x  z 

(2)  PGG  x  v  G  x  x 

(1)  PGG  x  G  y  x  z 

(2)  PGG  x  G  y  x  G  x  x 

(1)  PGG  x  Gy  x  G  x  x 

(2)  PGG  x  G  y  x  G  x  x 

Then  P(G(G(X,  G(y,x))  ,  G(x,x)))  is  the  output  of  the  algorithm  and 
is  in  fact  a  general  matching  formula  for  the  two  wffs . 

Let  us  apply  matching  to  Q  (x,x)  and  Q(y.H(y))  . 

(1)  Qxx 

(2)  QyHy 

U)  Qxx 

(2)  Qx  Hx 

(1)  DOES  NOT  MATCH 

The  variable  x  cannot  be  replaced  by  H(x)  .  This  is  a  very  simple 
example  of  a  subtle  way  in  which  two  wffs  can  fail  to  match.  The 
more  usual  case  of  not  matching  arises  from  subcase  iv)  . 
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Theorem.  If  matching  is  applied  to  two  atomic  wffs  B  and  C 
of  S3  *  then  in  a  finite  number  of  steps  the  algorithm  outputs  a  gen¬ 
eral  matching  formula  if  a  matching  formula  exists  and  outputs  DOES 
NOT  MATCH  if  no  matching  formula  exists. 

Prooft  First  we  note  that  the  process  stops  in  a  finite  number  of  steps 
since  each  application  of  step  2  which  does  not  stop  the  procedure  elim¬ 
inates  a  variable  from  (1)  and  (2).  Let  H(R)  for  a  formula  R  be  the 
hypothesis  that  there  is  a  simultaneous  substitution  in  (1)  and  (2) 
which  yields  two  copies  of  R  and  further  R  is  a  general  matching 
formula  for  (1)  and  (2) . 

Claim:  H(R)  holds  before  an  application  of  step  2,  case  b)  if  and 
only  if  H(r)  holds  after  step  2,  case  b). 

Suppose  subcase  ill)  is  about  to  be  applied  and  H(R)  holds. 
Then  the  same  formula  must  be  substituted  for  the  variables  which  occur 
at  (l)n  and  (2)n  in  order  to  obtain  two  copies  of  R  .  Hence  H(R) 
holds  after  one  of  these  variables  is  replaced  everywhere  by  the  other. 
Conversely  if  H(R)  holds  after  an  application  of  subcase  iii)  then 
H(R)  must  have  held  before. 

Suppose  subcase  i)  or  ii)  is  about  to  be  applied  and  H(R) 
holds.  If  in  the  simultaneous  substitution  D  is  translated  into  D* 
then  v  must  be  replaced  by  D*  by  the  substitution.  Note  that  if  D 
properly  contains  v  then  the  simultaneous  substitution  cannot  possibly 
yield  identical  formulas  at  (1)  and  (2)  and  hence  H(R)  would  not 


have  held,  if  A  does  not  contain  v  then  H(R)  will  still  hold  after 
applying  the  subcase.  The  converse  is  similarly  true. 

If  subcase  iv)  holds  it  is  clear  that  H(R)  for  any  R  could 
not  hold  before  or  after  applying  iv) . 

Hence  the  claim  is  verified.  If  some  formula  R  is  outputed  by 
step  2,  case  a)  then  using  our  claim  R  must  be  a  general  matching 
formula  for  B  and  C.  LetH(R)'  be  the  hypothesis  H(R)  with  the 
word  "general"  deleted.  By  examining  the  proof  of  the  claim  we  see 
that  the  modified  claim  —  H(R)*  holds  before  step  2,  case  b)  if  and 
only  if  it  holds  after  —  is  similarly  true.  Now  suppose  DOES  NOT 
MATCH  is  outputed.  Then  for  no  R  does  H(R)'  hold  for  (1)  and  (2). 

By  our  modified  claim  H(R)'  holds  for  no  R  for  (1)  and  (2)  immediately 
after  step  1.  But  in  this  situation  (1)  and  (2)  have  no  variables  in 
common  so  that  we  can  conclude  that  B  and  C  do  not  match.  Q  E.D. 

Theorem.  If  in  the  matching  algorithm  atomic  wff  B  is  written  in  (1) 
and  atomic  wff  C  is  written  in  (2) ,  then  the  algorithm  outputs  B  if 
and  only  if  B  is  an  instance  of  C. 

Proof:  This  is  easily  checked  from  the  definition  of  matching. 

Definition:  We  use  matching  to  define  a  rule  we  call  matching  reduction: 
Let  B  and  C  be  atomic  formulas.  If  B  is  an  instance  of  C  then  re¬ 
place  C  (resp.  v  C)  and  by  C  (resp.  •»  0)  and  D(..,T. .,} 

(rasp.  D{.,.r,.,)),  If  B  matches  C  with  the  general  matching 


formula  B'  but  is  not  an  instance  of  C  ,  then  add  to  C  (resp.  ~C) 
and  D(. .  .B. ..),  the  formula  D'(...T,..),  where  is 

obtained  from  D(. .  .B. . .)  by  making  the  same  simultaneous  substitu¬ 
tion  required  to  get  B'  from  B  (resp.,  add  D*  . 

We  are  finally  ready  to  define  the  class  of  theorems  of  S^. 

Definition.  A  finite  sequence  of  finite  sets  of  quantifier-free  wffs  of 
S3  is  said  to  be  a  proof  of  the  theorem  B  if 

1)  first  set  contains  only  the  Skolemization  of  (Exj). . . .  (EXjj )  ~  B 
where  Xj ,  . .. . ,  x^  are  all  and  only  the  free  variables  of  B  , 

2)  the  final  set  contains  the  wff  F  , 

3)  every  set  but  the  first  is  obtained  from  its  immediate  predecessor 
by  a  single  application  of  matching  reduction  or  one  of  the  re¬ 
duction  rules  1),  4),  6)  and  7)  of  Sj  . 

Examples: 

^  (Ax)  P  (y,x)  3  (Ex)  P  (x,z) 

Proof:  (  P(a,x)  &  ~P(x,b)l  ,  f  P(a,x)  ,  *"P(x,b)? 

(p{a,x)  ,  ^P(x,b)  ,  ~T  f  P(a ,x)  ,  ~  P(x,b)  ,  F  % 

^  (Ay)(P(x)  3  Q(y))  3.  P(x)  3  (Ay)  Q(y) 

Proof:  |  (P(a)  3  Q(y))  &  (P(a)  &  *  Q(b))  1  . 

tP(a)  3  Q(y)  .  P(a),  ~Q(b)}  ,  j  T  3  Q(y)  ,  P(a)  ,  ~  Q(b)  } 

)0(y)  ,  P(a)  ,  -Q(  b)‘\  ,  \f  ,  p(a)  ,  ~Q(b)  1  . 


$P(x)  , 


P(a)  1  , 


3  (Ax)  P  (x)  3  P  (y) 

Proof:  j  P(x)  &  ~P  (a)  }  , 

S  F  *  ~P(a)  ^ 

IxaaPies.froin  Group  Theory,  Let  GROUP  be  an  abbreviation  for  the 
formula  (commas  are  dropped  for  compactness) 

(Ax)  (Ay)  (Az)  (Au)  (Av)  (Aw)  .  P(exx)  &  P (l(x)xe)  & 

(P(xyu)  v.  P(uzw)  P(yzv)  s  P(xvw))  & 

(P(yzv)  -3.  P(xvw)  o.  P(xyu)  3  P(uzw))  . 

Then  ^  GROUP  o  P(xl(x)e) 

Proof:  Skolemization  and  several  reductions  gives  us  a  set 
containing  the  formulas 

(Bx)  P(exx)  , 

(B2)  P(I(x)xe)  . 

(B3)  -P(xyu)  v,  -vP(uzw)  v.  ~P(yzv)  v.  P(Xuw) 

(B4)  ~P(yzv)  v.  ^P(xvw)  v,  ~P(xyu)  v.  P(uzw)  ,  and 

(B5)  —  P(al(a)e)  . 


Now  by  applying  matching  reduction  and  Sl  reductions  we  obtain  the 
following  additional  formulas: 


(B6) 

P(yl(a)  v) 

v.  -  P(xve)  v  *  p(xya)  ,  by 

applying  (B^)  to  (B4)  (written  "Bs  into  B4") 

(B7) 

P(x  I(a)e) 

v.  ~  P{Xea)  f  by  „Bi  .nto  ^  ^ 

(Bg) 

*  P(I(I(a))ea) 

»  by  "B  into  B„  ,  ** 

2  7 

^) 

*'  P(I(I(a))yu} 

V*  ~p(yze)  ,  by  "B8  into  B3 

-  29  - 


(Bjq)  **P  (eza)  v  «•  P(I(a)  ze)  ,  by  "B2  into  Bg 


{Bn)  -^P(Ka)ae)  ,  by  "B,  into  B 


'1 


10 


Now  is  reduced  to  and  then  F  . 


^  GROUP  p  P  (xea) 

Proof:  Skolemization  and  several  reductions  gives  as 


®1> ' 

(B2)  ,  (Bg)  1 

(B4)  ,  and 

<C,) 

P(aea) 

Now  we  obtain 

<c2) 

P(ayu)  v. 

■*^P(uea)  v  «P(yee) 

.  by  "C1 

(C3) 

-*/P(aye)  v. 

•*P(yae)  ,  by  "Bj 

into  C2  ,  M 

(C4) 

~P(aI(a)e)  , 

by  ‘'B2  into  C3 

li 

• 

Now  we  can  derive  F-  from  (Bj)  ,  {B2)  ,  (B 3)  ,  (B4)  ,  and  (C4)  as  was 
demonstrated  in  the  previous  proof. 


The  fact  that  one  of  the  premisses  of  a  matching  reduction  must 
be  an  atomic  formula  limits  the  power  of  though  it  greatly  aids  com¬ 
putational  efficiency.  For  example  the  set  of  wffs 
f  P2(x)  &  P2CX)  v.  0]  (x)  &  02  (x)  ,  Pj(y)  v  P2(y)  , 

-Qlte)  v  ~.Q2{2)  ^ 

is  contradictory  but  w#  can  not  reduce  this  set  to  include  F  by  our  rules 
of  .  Also  Sj  —as  did  Sj  —  lacks  sufficient  devices  to  handle 
the  propositional  eonnectiv  es.  For  example,  no  wffs  of  the  forms 
B  3  C  ,  B  &  C,  <*-B  ?  G  ,  or  ^.BvC  are  theorems  of  . 

Hence  with  the  relationship  between  Sj  and  S2  in  mind  we  extend  S3  to  S 
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4.  The  Formal  System  S4 


The  system  is  obtained  from  S3  by  modifying  the  definition 
of  the  proof  of  a  theorem.  is  a  complete  system  for  the  first  order 

predicate-function  calculus. 

Definition.  Let  B*  be  MAy^)  ....  (Ayn)  {{  **(AXj)  ...  (A^B)0)  , 
where  Xj  ,  ....  xft  are  all  the  free  variables  of  B  and  yj  ym 

are  all  the  free  variables  of  (/^(Ax^  ...  (Axn)B)°  . 

Let  Jb  be  the  set  of  all  variable-free  terms  which  can  be  formed  from 
the  constants  in  B*  (if  B*  contains  no  individual  constants,  let  Jb 
be  all  the  terms  in  the  constants  of  B*  and  a  —  the  first  individual 
constant  in  alphabetic  order)  . 

Let  Lfa  be  the  set  of  all  variable-free  atomic  wffs  obtained  by  instan¬ 
tiating  the  yj 's  in  the  atomic  wffs  of  B*  by  elements  of  Jb  . 

Example.  Let  B  be  A,(Ex)(Ay)  .  (Ax)P(y,x)  *  (Ex)  0  (*  ,x,y)  . 

Then  B°  is  *P(y,G(y))  v  Q(H(y)  ,  a  ,  y)  (see  the  first  example 
of  $3  )  .  Hence  B*  is  ^  (Ay) .  ^  P(y,G(y))  v  Q(H(y),  a,  y)  . 

Now  Jb  =  Ja,  G(a),  H(a),  GG(a),  GH(a),  ....  7 

and  Lb  ^  f  P(M,G(M))  :  M  f  ^  U  j  Q(H(M).  a,  M)  :  M*Jb  1  . 

Theorem* of  5^  :  A  finite  sequence  Bj  ,  , . ,  ,  Bn  of  wffs  of  Sb 

is  said  to  be  a  proof  of  B  in  S4  if  Bn  is  B*  and  if  for  each  1 
(I  =  l,2,...,n)  Bj  is  a  theorem  of  S3  or  there  are  j  and  k 
(1  £  }  *  i  and  1  4  k  *  i  )  such  that  for  some  C  in  L^  ,  Bj 
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is  C  ■?  Bj  and  Bk  is  ~C  =3  Bj  , 


Example. 

V*4  lAx)(Px(X)  &  P2(x)  v.  Qx  (x)  &  Q2  (x)) 

D  (Ex).  Pj(x)  &  P2(x)  v.  Q1  (x)  &  Q2(x)  (B) 


Proof:  We  find  B*  to  be 

^  (Ax) (Ay) (Az)  .  (P,(x)  &  P2(x)  v.  Qx(x)  &  Q2(x))  &.  {"'Pjty)  v  ^P2(y)) 

&.  -01(i)  v  -Q2  (  2  )  (B*) 

Also  Ib  is  i  a} 

and  Ljj  is  ^ P x (a)  ,  P2(a)  .  Qx(a)  ,  Q2(a) 

It  is  easily  checked  that 

»-3  Pj(a)  B*  k3  ^  3  • 

Hence  ^  P ^ (a)  o>  B*  ,  ^Pj(a)  O  B*  .  B*  \  is  a  proof  of 


In  an  appendix  to  this  section  we  shall  outline  a  proof  of  the 
3odei  -  Herbrand-Gentzen  theorem  for  (i.e,,  a  wff  of  is  a 
theorem  if  and  only  if  it  is  valid  in  every  (non-empty)  model).  Unlike 
the  usual  formulations  of  the  first  order  predicate  calculus,  the  com¬ 
pleteness  theorem  and  the  accompanying  proof-procedure  follows  directly 
from  the  definition  of  proof  in  »  This  is  not  to  suggest  that  this  proof- 
procedure  can  be  mechanized  to  do  any  but  the  most  trivial  mathematics. 
This  author  firmly  believes  that  this  procedure  and  all  others  developed 
to  date  are  not  even  remotely  close  to  being  useful  as  completely  auto- 
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nr. -icd  procedures.  However  our  program  of  Semi-Automated  Mathe¬ 
matics  is  much  less  ambitious  (and  hence  more  realistic).  And  here 
S4  is  quite  useful;  for  while  the  mathematician-operator  directs  the 
over-all  strategy  of  the  proof,  the  machine  can  easily  do  some  of  the 
numerous,  trivial,  and  bothersome  steps  since  the  proof-means  of  S4 
coincide  so  closely  with  its  related  proof-procedure. 


Appendix  to  4  .  The  following  steps  sketch  a  proof  of  the  fact 


that 

1) 


2) 

3) 


H4  B  iff  B  is  valid. 

b  B  implies  B  is  valid  since 

3 

a)  the  skolemization  of  the  negation  of  the  universal 
closure  of  B  is  not  satisfiable  iff  B  is  valid 

b)  a  set  of  wffs  of  is  “satisfiable"  iff  it  is  after 

an  application  of  one  of  the  reduction  rules  of  >  and 

c)  no  set  containing  F  is  "satisfiable. " 

f-  B  implies  B  is  valid,  by  1). 

4 

B  not  provable  in  S4  implies  that  for  every  finite  subset 
^  C]_,  . .,  Cn^  of  Jb  there  is  a  non- theorem  of  S3  of 


4) 


the  form 

Ci  C3  *  *  *  •  Cn  B*  ,  where  CA  is  Ci  or  ^  Cj 
Let  Ci ,  C2,  03,  ....  be  an  enumeration  of  .  By  3) 
there  is  a  sequence  of  non-theorems  of  S3  of  the  form 


(1)  «>  (2) 

Ci  O  B*,  Cj  5,  Cj  ^ 

B* 

.  d3U 

C^3)  P,  C 

....  where  C^  is 

ci 

or  ~  Cj  . 

Let  D- 

be  Ci  if  infinitely  many  of  the  C^  's  are  Cj  .  Let  Dj 
be  v  Cj  otherwise.  Of  the  infinitely  many  i's  such  that 
C^  is  if  infinitely  many  have  C^  being  C^  then  let 
D3  be  C^  otherwise  let  D3  be  ~  C3  .  And  so  on. 


In  this  way  we  have  picked  D^,  03,  D3,  --  so  that  for  each 
finite  n  ,  infinite  many  of  the  non-theorems  in  the  sequence 


above  start  with  •  Dn  "•*•*" 

i 

Hence  for  each  n,  Dj  o  .  ••••  .  Dn  ^  B*  is  not 

provable  in  • 

5)  From  4)  we  can  define  a  model  whose  elements  are  in 

which  B*  does  not  hold.  The  values  of  the  functions  of  B* 
are  given  by  the  rule:  the  value  of  G*n)  when  applied  to  the 

elements  M . of  Jb  is  to  be  the  element 

G^(M  ,  ,  M  )  of  J,  .  The  values  of  the  predicates 

of  B*  are  given  by:  the  value  of  when  applied  to  the 

elements  . ...»  Mn  of  Jb  is  to  be  T  if  some  is 

P^(M1# _ Mn)  and  F  otherwise. 

6)  B  does  not  hold  in  the  model  defined  in  5).  This  follows 
easily  from  the  definition  of  B*  and  5). 
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5.  The  Formal  System 

i 

The  system  Sg  is  to  be  an  t/iorder  predicate-function  calculus 
patterned  after  .  Enough  type  mechanism  is  included  in  to  dif¬ 
ferentiate  between  predicates  and  general  functions  while  allowing  cer¬ 
tain  function- like  properties  of  predicates  to  be  obtained  as  instances  of 
more  general  theorems  about  functions.  Again  we  postpone  to  a  later 
report,  the  discussion  of  equality. 

Primitive  symbols  of  Sj.  : 

1)  Improper  symbols  <  >  (  )  t  3  , 

2)  Logical  symbols  O  v  &  =  AE  A  TF 

3)  Type  constants  U  V 

4)  An  infinite  list  of  variables  of  each  type. 

5)  An  infinite  list  of  constants  of  each  type. 

Type  formalism: 

1)  V  is  a  type  (—  the  truth-value  type). 

2)  U  is  a  type  (  —  the  type  of  the  universe) . 

3)  If  ,  ....  ,  *TCn  and  T  are  types,  then 

,  'E  ,  t"  >  is  a  type  (  -  thu  type  of  all  n-ary 
functions  whose  n  arguments  have  the  types  "t  ,  ...  ,  X n 
respectively  and  whose  value  is  type  *£  . 
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1)  T  ,  <r  .  £  .  f  .  T  l .  ^  ,  . . . .  to  range  over 

types, 

2}  Lower  case  roman  letters  with  integer  subscripts  and  type  super¬ 
scripts  to  range  over  variables  of  that  type. 

3)  Gr,  Hr  ,  Mr  ,  ,  Gj*  ,  ,  .....  to 

range  over  constants  of  type  T  . 

T  f  V  Tf  t* 

4)  B  ,  C  .  D  ,  Bj  ,  ,  ....  to  range  over 

terms  of  type  T  . 


Type  containment  :  Type  t  is  said  to  be  contained  in  type  <r  , 

written  t  C.  < r*  (  as  defined  by  the  following  inductive  definition: 

1)  V  C  u 

2)  T  C 

T  i  C  T  2  and  ^  G  implies  G  . 

4)  If  <r.  C  (  i  =  1 . n  )  and  T  C  <T 

then  <rif  ...  ,  ^  n  •  t  >  C  ^ .  c*n,  >  . 

We  define  max  {  X  ,  r  )  and  min  (  X  ,  cr )  by 

1)  max  (  V  ,  U  )  =  max  (U  ,  V  )  =  U 

2)  min  (  V  ,  U  )  =  min  (U,  V  )  =  V 

3)  if  min  (  T  ^  ,  <T  j  )  and  max  {  T  ,  T  )  have  been  defined 
then 

max  {  *  *  1 .  Tn  '  *  >  -  irx . ^  ,  <r>  ) 

"  (  minlTi,  ^  j),  nun  (  ?"n,  ,  max  (T  ,  (T)  ") 
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4) 


if  max  (  1  j  ,  i  )  and  min  (  t  ,  C“  )  have  been 
defined  then 

min  (  ^  f  j  i « •* i  ^  n>  t  }  >  {  8“i  i  •  •  •  >  ft  »  0“ 'y  ) 

=  { max  (  T*  ^ ,  (Tj  ),...,  max  (  T  ,  <r  n )  * 

min  (t,  T  ) 

5)  min  (  T  ,  «r)  and  max  (  T  ,  <f)  are  left  undefined  un¬ 
less  their  being  defined  follow  from  1)  -  4). 

Notice  that  min  (  X  ,  r  )  is  the  most  general  common  tyre  of 
T  and  or  ,  if  t  and  T  have  a  common  type. 
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7)  (A  x  r  )  BV  and  (Exr)BV  are  wfts  of  type  V, 

The  definitions  of  bound  and  free  are  analogous  with  . 

8)  A  wft  of  type  V  is  called  a  well-formed  formula  (wff)  . 

Substitution.  We  use  the  following  substitution  notation  ir  the 
meta-language  of  S5  :  If  <T  £  V  ,  then 


stands  for  the  result  of  replacing  all  the  free  occurrences  of  x  in 

(  g- 

C  by  B  and  relettenng  (in  some  canonical  fashion)  those 

bound  variables  of  C*  which  would  otherwise  capture  some  free 
variables  of  B0*  . 


Lambda-conversion .  In  forming  the  Skolemizations  and  as  a  reduction 

rule  for  we  use  the  following  rule  of  j  -conversion;  A  wft  of 

the  form  [(  ^Xj  ,  ....  ,  x  )  B  1  (Cj ,  . .  ,  Cn  )  can  be  replaced 

by  s  *1  *•**  xn 
Cf  •  •  •  •  cn 

if  A  -conversion  is  not  applicable  to  any  sub-wfts  of  the  wft. 

Special-conversion.  A  wft  of  the  form  (  >  x-,...  ,  xn  )  (Cb3  O) 

where  the  Xj  ’s  do  not  appear  free  in  B  ,  can  be 
replaced  by  B  ,  and  conversely. 

Matching.  Any  wft  C  obtained  from  a  wft  B  by  finitely  many  applica¬ 
tions  of  substitution,  relettering  bound  variables,  'A  -conversions,  and 


said  to  be 


^converted 
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t 


sperial-nonversions  is  called  an  instance  of  B  .  Two  wfts  B^  and 
B£  are  said  to  match  if  they  have  a  common  instance  (called  a  match¬ 
ing  term  for  Bj  and  B2  )  .  A  matching  term  for  B^  and  ,  from 
which  every  other  matching  term  can  be  obtained,  is  called  a  general 
matching  term. 

Example:  Unlike  ,  two  wfts  of  can  match  without  having 

a  general  matching  term.  For  example  G  (  f  (x)  ,  f  ,  x  )  and 
G  (H  (M),  f  ,  x  )  have  as  matching  terms  G(H  (M),  H  ,  M)  , 

G(H(M)  ,  (  >  Z  )  H(M)  ,  x)  ,  and  G(H(M)  ,  (  A  2  )  1  ,  H(M)  ), 
However  G  (  f  (x)  ,  f,  x  )  and  G(H(M),  f,  x)  have  no  general  match¬ 
ing  term  as  can  easily  be  seen.  Still  we  notice  that  G(H(M)  , 

(At)  H(M)  ,  x)  is  a  more  general  term  than  G(H(M)  ,  (  Ax  )  H(M)  ,  N  ) 
though  both  are  matching  terms  for  the  original  two  formulas.  This  leads 
us  to  the  following: 

Definition.  A  general  matching  set  for  wfts  Bj  and  B£  is  a  set 
of  matching  terms  for  Bj  and  B2  such  that  every  other  A  -converted 
matching  term  is  an  instance  of  some  member  of  the  set  and  no  mem¬ 
ber  of  the  set  is  an  instance  of  another  member.  Two  terms  for  which 
neither  is  an  instance  of  the  other  are  called  independent. 

In  order  to  describe  an  algorithm  for  matching  in  Sj  we  first 
define  some  concepts. 
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Definition.  We  define  the  character  of  a  sub- wft  of  a  wft  B 
as  follows: 

1)  A  constant  has  constant  character. 

2)  A  free  variable  of  B  has  variable  character. 

3)  A  bound  variable  of  B  has  constant  character. 

4)  (Ax)  B  and  (Ex)  B  have  constant  character. 

5)  Lb  1  (Bj  _ _  Bn  )  and  (>  xx _ ,  xn)P  have  the  same  character  as  B. 

Definition.  Two  A  -converted  wfts  are  said  to  rough-match 

under  the  following  inductive  definition: 

*C  c 

1)  Two  wfts  B  and  C  of  variable  character  rough-match 

if  their  types  contain  a  common  type;  i.e.  if  min  (  T  ,  <r  )  is 
defined. 

T  «r 

2)  A  wft  B  of  constant  character  rough-matches  a  wft  C 

of  variable  character  if  x  e  <r  . 

3)  Two  identical  constants  rough-match. 

4)  Two  bound  variables  rough-match  if  they  have  the  same  type. 

5)  Two  wfts  of  constant  character  £bo  ^  (Bx ......  Bn  )  and 

[CQ]  (Cj,,...,Cn)  rough-match  if  Bx  and  Cx  rough- 
match  ( f  =  o , 1 ......  n)  . 

6)  Two  wfts  (Ax^)  B  and  (Ay^)  C  of  constant  character  rough- 

match  if  t  =  er  and  if  B  and  C  rough-match.  Similarly 
for  (Ex)  and  (  >  ....  xn  )  .  (Special-conversion  may  have 
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to  first  be  applied  to  a  wft  of  constant  character  which  corre¬ 
sponds  to  a  wft  of  constant  character  whose  first  proper 
symbol  is  ^  .) 

Remark:  If  two  wfts  do  not  rough-match  then  they  do  not  match. 

Two  wfts  without  free  variables  or  quantifiers  rough-match  if  they 
match . 


We  shall  use  a  series  of  examples  to  describe  the  matching 
algorithm  for  S5  .  Once  the  matching  algorithm  has  been  defined,  we 
can  define  the  concept  of  proof  in  analogously  to  that  in  (going 
first  to  an  intermediate  system  s/  which  corresponds  to  S3  )  . 

Of  course  the  theorems  of  S5  will  be  valid  in  every  non-empty  model, 
but  the  converse  of  this  result  (The  Henkin  Completeness  Theorem)  has 
no  known  proof  which  corresponds  to  the  Godel-Herbrand-Gentzen 
method.  Hence  we  have  no  appendix  for  this  section  corresponding  to 
the  appendix  of  Section  4. 

Example:  Let  x,  y,  2  ,  x  ,  M.  >1  be  objects  of  type  T  ; 

let  f,  fj  f  G  be  objects  of  type  Kx  ,  ,  0'V)'  where  (T  £  T 

and  let  g  and  h  be  objects  of  type  .  Remember  that 

the  lower  case  letters  are  variables  and  the  upper  case  letters  are  con¬ 
stants.  Let  us  match 
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(1)  H(  Cfi(x)  1  (  t)  ,  l  ,  f1  ,  (Ah)  h(x)  )  ,  and 

(2)  H(  rG(N)3  (y)  ,  M  ,  f  ,  (Ag)g(y)). 


If  necessary  we  would  reletter  the  free  and  bound  variables  of  (1)  and 
(2)  so  that  no  free  variable  occurs  in  both  (1)  and  (2)  and  such  that 
no  variable  appears  both  bound  and  free  in  (1)  and  (2).  Now  we  proceed 
from  left-to-right  making  the  more  routine  matches.  Tor  example  we 
by-pass  the  corresponding  sub-wfts  [f#(x)7  (2)  and  fG{N)7  (y) 
since  ff  is  a  free  function  variable  with  arguments  and  hence  it  is 
not  necessary  that  x  match  N  or  *  match  y  .  We  do  the  routine 
matches  first  so  that  the  matching  of  free  function  variables  with  arguments 
will  be  as  simple  as  possible.  In  this  spirit  we  match  z  with  M 
and  fj  with  f 
resulting  in 

(1.1)  H(  [  f(x)  1  (M)  ,  M  ,  f  ,  (Ah)  h  (x)  )  . 

and  (2.1)  -  (2)  .  In  general  when  we  are  matching  variables  f** 

and  fj  which  appear  without  arguments,  we  substitute  f  for 

if  %  £■  ,  if  for  fT  if  TCT  ,  f2min{Ct) 

for  fj  and  f  %  (where  f2min  has  not  previously 

appeared)  if  min  (  ,X  )  is  defined,  and  finally  we  do  not  get  a 
match  if  **  and  have  incompatible  types  —  i.e.  min  (  4",  2  )  not 
defined.  Now  we  consider  the  corresponding  sub-wfts  (Ah)  h(x)  and 
(Ag)  g  (y)  ,  If  the  corresponding  bound  variables  g  and  h  were  not 
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the  same  type  we  would  not  have  a  match.  We  reletter  the  bound  var- 

i 

iables  so  that  the  corresponding  bound  variables  are  the  same.  This 
results  in  (2.2)  =  (2.1)  and 

(1.2)  H(  [f(x)1  (M)  ,  M  ,  f  ,  (Ag)  g  (x)  )  , 

Interior  bound  variables  are  considered  as  constants  so  that  x  and  y 
in  (Ag)  9  (x)  and  (Ag)g  (y)  must  match  resulting  in  (1.3)  -  (1.2)  and 

(2.3)  HrtG(N)3  (x)  ,  M  ,  f  .  (Ag)  g  (x)  )  . 

Now  we  have  to  match  £f(x)3  (M)  and  [G(N)1  (x)  . 

Notice  that  this  should  be  considerably  easier  than  attempting  to  match 
these  sub-wfts  initially  --  for  we  have  identified  two  variables  and  re¬ 
placed  a  third  variable  by  a  constant.  We  wish  to  consider  every  sub¬ 
stitution  for  f  of  the  form  (  *u)  (  A  v)  B  (u,  v)  where 
[[(  >u)  (  X  v)  B  (u,  v)l  (x)  3  (M)  ,  or  equivalently  after  two  appli¬ 
cations  of  lambda-conversion,  B(x,  M)  ,  matches  [G(N)J  (x)  . 
However  we  consider  all  substitutions  of  this  form  so  that  B(x,  M) 
rough-matches  Tg(N)3  (x)  .  using  the  algorithm  itself  to  eliminate 
later  any  substitutions  which  lead  to  non-ma.ching.  The  B  (u  ,  v  )  's  , 
which  we  call  candidates,  are  defined  inductively  by 

1)  Z  G(N)  I  (x)  is  a  candidate  ;  and 

2)  if  B'  is  a  candidate  and  some  sub-wft  B "  of  B'  rough- 
matches  x  (respectively  M  )  ,  then  the  result  of  replacing 


B"  in  B'  by  u  (respectively  v  )  is  also  a  candidate. 
Hence  we  have  the  six  candidates  Cg(N)3  (x)  ,  Eg(N)1  (u)  , 

1  G(K)  3  (v)  ,  [G(u)](x)  ,  [G(u)l(u)  ,  and  [g(u)3(v)  . 

After  substitution  and  lambda-conversion  we  obtain  the  six  matching 
problems 

(1-1)  H  £[G(N)3(x).  M  .  (JN(Av)  r  G(N)3  (x),  (Ag)g(x)  ) 
(2-1)  -  (1-D 

(1-2)  H  (  CG(N)  3  (x)  ,  M  ,  (>  u)  (Au)  [g(N)3  (u)  ,  (Ag)  g  (x)  ) 
(2-2)  -  (1-2)  , 

(1-3)  H  ( L  G(N)3  (M)  ,  M  ,  O  u)  (A  v)  tG(N)]  (v)  ,  (Ag)  g  (x)  ) 
(2-3)  H(t,G(N)3(x)  ,  M  ,  (>u)(Av)  Cg(N)1  (v)  ,  (Ag)  g  (x)  ) 

(1-4)  H  (  [  G(x)  3  (x)  ,  M  ,  ( A  u)  (  X  v)  £g(u)1  (x)  ,  (Ag)  g  (x)  ) 

(2-4)  H  (  T  G(N)1  (x)  ,  M  ,  ( *u)  (>  v)  [g(u)1  (x)  ,  (Ag)  g  (x)  ) 

(1-S)  H(tG(x)J(x)  ,M  .  (A  u)  (  A  v)  t  G(u)  3  (u)  ,  (Ag)  g  (x)  ) 

(2-5)  H([G(N)3(x)  ,  M  .  (>u)  (  Av)  [G(u)3  (u)  .  (Ag)  g  (x)  ) 

(1-6)  H(tG(x)lCM),  M,  (Xu)  (  Av)  [G(u)l  (v)  .  (Ag)  g  (x)  ) 
(2-6)  H([G(N)l(x),  M,  (>u)  (>v)  lG(u)l  (v)  .  (Ag)  g  (x)  ) 

We  consider  these  problems  to  be  in  a  push-down  list.  Let  us 
treat  the  top  problem,  (1-6)  and  (2-6)  .  We  must  match  x  and  N. 
This  results  in  replacing  x  everywhere  in  (1-6)  and  (2-6)  by  N  . 
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But  then  we  must  match  M  with  N  ,  which  is  impossible.  Hence 

s 

we  delete  (1-6)  and  (2-6)  from  our  list.  Now  we  again  treat  the  top 
problem,  (1-5)  and  (2-5)  .  Here  x  must  be  replaced  everywhere 
by  N  yielding 

(1-5.1)  H(  [G(N)]  (N)  ,  M,  Oi  u)  (>  v)  t  G(u)  ]  (u)  ,  (Ag)  g  (N)  ) 

and  (2-5.1)  =  (1-5.1)  .  Now  we  let  our  general  matching  set  con¬ 

tain  the  term  (1-5.1).  Let  us  write  this  as  GMS  -  $(1-5. 1)  ?  . 

Now  we  delete  (1-5.1)  and  (2-5.1)  from  our  list  of  problems.  Next 
we  obtain 

(1-4.1)  H([G(N)]  (N)  ,  M  ,  (  *u)  (>v)  [G(u)3  (N)  .  (Ag)  g  (N)  ) 

and  (2-4.1)  =  (1-4.1)  .  Since  (Xu)(Av)  [g(u)3  (N)  is  in¬ 

dependent  of  (>u)  (  ^v)  Lg(u)}  (u)  ,  (1-4.1)  is  independent  of  (1-5.1) 
Hence  we  add  (1-4.1)  to  GMS  getting  GMS  s  J  (1—5,1)  ,  (1-4. 1)|  . 
Similarly  we  add  (1-3.1),  (1-2),  (1-1)  to  GMS  where 

(1-3.1)  H(  [  G(N)  1  (M)  ,  M,  (\u)(Av)  [G(n)](v)  ,  (Ag)  g  (M)  ) 

Thus  our  final  result  is 


GMS  *  $(1-1)  ,  (1-2)  ,  (1-3.1)  ,  (1-4.1)  ,  (1-5. 1)J 

Notice  that  if  the  third  argument  of  H  were  deleted  that  GMS 
would  contain  only  H(CG(n)3  (x)  ,  M  ,  (Ag)  g  (x)  )  . 
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This  result  could  be  obtainted  very  quickly  by  noticing  that 
H  (w r  ,  M  ,  (Ag)  g  (x)  )  and 

H  {  tf1  (x)3  (M)  ,  M  ,  (Ag)  g  (x)  ) 


are  instances  of  one  another  (using  ()u)  (Av)  wr  for  fj  )  . 

This  suggests  the  following  rule:  If  every  occurrence  of  a  variable 

<  T  ,  T  n  T> 

f  '  *  *  * '  '  throughout  the  two  terms  .0  be  matched  is  with 

the  same  arguments  and  is  never  in  the  scope  of  a  quantifier  or  ^  , 

T  tr 

then  f  with  its  arguments  can  be  replaced  by  w  where  w 
has  not  previously  appeared.  As  an  application  of  this  rule,  consider 
the  following. 


Example.  We  wish  to  generate  GMS  for  the  wfts 


(1) 

G  ( 

f(x)  ,  g  (y,  f)  ,  x  ) 

(2) 

G  ( 

fi  (xx)  ,  2  ,  x1  ) 

Then 

using  the  rule,  g  (y,  f)  and  f^ 

(xi) 

can  be  replaced 

by  variables. 

,  Notice  that  we  could  not  replace 

f  (x) 

by  a  variable 

at  first,  since  f  appears  without  arguments  in  g  (y,  f)  .  We  then 
arrive  at 


(1.1) 

G  (w  2 

-  W1 

,  x ) 

(2.1) 

G  (w  2 

,  1 

,  Xj) 

T’nese  can  now  be  matched  in  a  straight-forward  manner,  the  ultimate 
result  depending  on  tne  +*’paa  of  the  variables  present. 
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If  Uj  .....  un  do  not  occur  free  in  D  ,  then  we  can 
interchange  (  ^  u^  ....  ,  un  }  I  D  ]  (u^ ,  ...  ,  un  )  with  D 
using  special-conversion.  This  raises  a  problem  when  (Au^,  ..  ,  un  )  C 
must  match  D  and  the  first  proper  symbol  of  D  is  not  A  .  For  C 
may  have  the  form  [d1  (Uj  .....  un  )  ,  or  may  be  put  in  that  form  by 
making  certain  substitutions  for  free  function  variables  with  arguments. 

This  situation  is  easily  resolved  by  replacing  D  in  these  instances  by 
. un>  Id]  (u^  , . . . ,  un  )  and  carrying  on  with  the  match¬ 
ing.  For  when  we  match  C  and  [d}  (u^,..  ,  un  )  we  will  find 
if  C  can  be  put  in  the  appropriate  form. 

We  have  not  encountered  the  situation  in  the  examples  consid¬ 
ered  thus  far,  where  we  are  matchii,.)  two  sub-wfts  whose  first  proper 
symbols  are  free  function  variables  with  arguments.  We  consider  first 
an  example  where  the  first  symbols  are  the  same.  In  the  second  example 
we  show  how  the  general  case  can  be  reduced  to  the  current  case. 

Example ♦  Suppose  after  the  beginning  stages  of  matching  we  arrive 
at  the  situation:, 


(1) 

H  (f(x.y.M)  , 

f,  g,  X,  y,  z  ) 

(2) 

H  (f(x.  Z ,  N)  , 

f.  g,  x,  y,  z  ) 

Now  we  attempt  to  match  f(x,  y,  M)  and  f(x,  z,  N) . 

We  keep  the  corresponding  arguments  which  are  identical;  we  delete 
the  corresponding  arguments  which  don’t  rough-match;  and  then  we 
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delete  all  2n  possible  combinations  of  the  remaining  n  arguments 
{in  this  example  n  =  1  )  ,  obtaining  2n  matching  problems  in 
place  of  the  previous  one.  In  this  case  we  obtain 

(1-1)  H  (  fj  (x,  y)  ,  (  Au,  v,  w)  fL  (u,  v)  ,  x.  y,  z  ) 

(2-1)  H  <T\  (x,  z)  ,  (A  u,  v,  w)  f1  (u,  v)  ,  x,  y,  z  ) 

(1-2)  H  (f  (x)  ,  (  A  u,  v,  w)  f2  (u)  ,  x,  y  ,  z  ) 

and  (2-2)  =  (1-2)  .  The  tildas  (  ~  )  above  the  f1  and  f2 

indicate  that  this  process  has  already  been  performed  to  this  occurrence 
of  the  variable.  For  the  purposes  of  matching  the  arguments  inside  the 
f  ‘s  ,  we  consider  the  f's  as  constants.  Hence  from  (1-1)  and 
(2-1)  we  obtain 

(1-1.1)  H  (f1  (x,  y)  ,  ( A  u,  v,  w)  fj  (u,  v)  ,  x,  y,  y  ) 

and  (2-1.1)  =  (1-1.1)  .  Then 

GMS  =  i  (1-2)  ,  (1-1.1)  }  . 

Example .  Consider  the  intermediate  stage 


(1) 

G  (  f  (M, 

H)  , 

f, 

9  ) 

(2) 

G  (  g  (F, 

M)  , 

f, 

g  ) 

Considering  f  as  a  constant,  we  get  the  following  trial  substitutions 
for  g  by  the  method  of  our  first  matching  example: 
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that  GMS  is  actually  a  general  matching  set,  has  not  been  carried 


out.  There  seems  little  point  to  that  task  until  methods  for  handling 
substitutivity  of  equality  have  been  added. 

Remark.  The  following  derived  rule  holds  for  :  If  we  consider  the 
types  of  the  atomic  symbo.'  s  as  being  appended  as  superscripts,  then  the 
result  of  simultaneously  replacing  every  occurrence  of  U  in  a  theorem 
of  Sg  by  some  fixed  type  expression,  is  again  a  theorem  of  .  As 
an  application  of  this  rule  we  can  obtain,  for  example,  from  the  group 
theory  concerning  individuals,  the  group  theory  of  other  mathematical 
entities  such  as  transformations,  permutations,  etc. 
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6.  The  Formal  System  Sg 

t 

The  system  Sg  is  an  t./'-order  predicate  calculus  which  is 
more  powerful  than  Sg  in  that  a  mechanism  for  defining  sorted  var¬ 
iables  is  included  within  the  formation  of  Sg  .  This  system  suggests 
solutions  to  many  of  the  problems  which  arise  in  considering  the  auto¬ 
mation  of  a  "many-sorted"  system. 

Primitive  Symbols  of  Sg  .  The  primitive  symbols  of  Sg  are 
■3  ,~,v,&,f,A,E,  a  ,  .  £ 

u  ,  v  ,  T,  F  ,  ]  ,  C  ,  /  ,  >  ,  <  ,  )  ,  (  ,  and 

an  infinite  list  of  variable  and  constant  forms. 


Well-formed  expressions  of  Sc  . 

o 

1)  Types  and  type  containment  are  defined  as  m  Sg  . 

2)  U  is  a  sort  of  type  U  . 

3)  V  is  a  sort  of  type  V  . 

4)  If  C  ,  ...  ,  (  <r  are  sorts  of  type 

i  j  ,  ...  ,  S  n  ,  4  respectively,  then  C  <r  ,  ,  . . .  ,  r 

is  a  sort  of  type  ^  S  j  ,  . . .  ,  i  n  ,  £  >  . 

5)  If  x  is  a  variable  form  and  <r  is  a  sort,  then  x/0-  is 

a  variable  of  sort  o~  . 

6)  If  G  is  a  constant  form  and  is  a  sort,  then  G/o" 

is  a  constant  of  sort  <r  . 

7)  T  and  F  are  well-formed  terms  (wfts)  of  sort  V 


8)  The  variables  and  constants  of  sort  or  are  wfts  of  sort  O'  . 

9)  If  B  is  a  wft  of  sort  V  and  o'  is  a  sort  of  type  S  , 

then  (  “X  x  /  <r  )  B  is  a  sort  of  type  &  .  (In  the  intended 

interpretation,  this  sort,  for  fixed  values  of  the  other  free  variables 
of  B  besides  x  /  cr  ,  is  to  be  the  sort — or  set —  of  all  elements 
of  sort  which  satisfy  B(x/  o~  )  .  ) 

10)  If  B}  . . . .  ,  Bn,  B  are  wfts  of  the  respective  sorts 

°~  i  '  •**'c"n'  ^  *  1 .  *  n  '  ^  which 

have  the  respective  types  £  ^  ,  . . .  ,  $  n  ,  (  i  ,  . . .  , 

^  n  *  ,  and  if  £  j  C,  (3.  t  then  CbI  (Bi  . 

. . .  ,  Bn  )  is  a  wft  of  sort  . 

11)  If  B  is  a  wft  of  sort  <T  ,  then  ( Xj,/ i,  ...  ,  xn  / C n  )  B 

is  a  wft  of  sort  \  >  •  •  •  /  ^n  •  •  If  B  is  a  wft 

of  sort  V  ,  then  so  are  (Ex/ T  )  B  and  (Ax/  cr)  B  .  (Free 

occuiTences  of  x/r  in  the  sorts  within  B  are  considered 

to  be  bound  by  the  initial  occurrences  of  A  ,  A  ,  E  ,  and  't  .  ) 

12)  If  <r  and  £  are  sorts,  then  r  £  £  is  a  wft  of 
sort  V  . 

13)  If  B  and  C  are  wfts  of  sort  V  ,  then  so  are  —  B  , 

(B  O  C  )  ,  (  B  v  C  )  ,  (B  &  C  )  ,  and  (  B  £  C  )  . 

We  shall  use  a  metalanguage  for  Sg  which  is  analogous  to  that  of  Sg  . 

We  develop  S,  in  a  more  standard  fashion  than  the  previous 

b 

five  systems  in  that  we  proceed  from  axioms  by  rules  of  inference.  We 
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only  sketch  this  development. 


1 


Axioms  and  Rules  of  Sg  .  In  addition  to  the  usual  rules  and 
axioms  needed  to  handle  tho  logic,  Sg  has  two  axiom  schema  for  sub¬ 
stitution: 

Al)  c*2  £  o.(Ax/£)B(x/£)'DB(C)f  where 

C  is  a  wft  of  sort  <r  ;  and 

A2)  (Ay/(Tx/<r)D(x/<r))B(y/-)  *>.  D  (C  )  O 

B  (C)  ,  where  here  and  below  y  /  -  stands  for  y  /  & 

if  i  is  the  last  sort  which  appeared  with  y  ;  hence  in 


this  instance  y  /  -  stands  for  y 

/  (  r  x/  <r  )  d  ( 

x  /  r  )  . 

Also 

s6 

has  six  axiom  schema  concerning 

sort  containment: 

A3) 

V 

C  U  ; 

A4) 

<r 

c  <7~  ; 

A5) 

r, 

_c  v  n 

c  ^  n 

3.  S 

£  cr 

D  (S  i  <  ^  n  '  ^ 

ini 

/N. 

H 1 

•  •  •  • 

CT  <T"  *> 

-  u  n  <  ' 

A6) 

(Ex/,,- )  B  z>  (t  x/iT  )  B  c 

■J 

A7) 

or 

1  I  <r2  °"2  S  ^3 

v  i 

\r 

IUI 

t 

(A x/r  )  (B  3  C)  o  •  (Ex/V  )  B 


o  ( t  X/V  )  B  c  (t  x/V  )  C  ;  and 
A9)  (Ey/u)  B  (y/*  )  =>.  B(x/(^y/^)B(y  /«<)). 

Analogous  to  the  situation  in  Sg  ,  we  will  need  to  have  the 
most  general  sort  contained  in  both  <r  and  £  —  abbreviated 
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by  gib  {  r  ,  i  )  - in  order  to  match  x/r  and  y/S  . 


We  define  the  abbreviations  gib  (  r  ,  £  )  and  lub  (  <r  ,  £  ) 
simultaneously  by 

1)  gib  ( <r  ,  U  )  =  gib  (  U,  )  =  r  , 

2)  lub  (  <r  ,  U)  =  lub  (  U,  )  =  U 

3)  if  the  aobreviations  lub  (  <r .  ,  <£■  .  )  and  gib  (  tr  ,  S  ) 
have  been  defined,  then  define 

9lb  (  . .  %  -  ^1 . ) 

=  <  lub  (  o~1  ,  .  lub  (  crn  ,  £  n)  ,  gib  (  <r,  £  )  >  , 

4)  if  the  abbreviations  gib  (  o*  .  ,  £  i  )  and  lub  (  <r ,  «f  )  have 
been  defined,  then  define 

lub<  ^  ^  1 .  °"n  '  <r>  '  ,  5  >  ) 

=  C  gib  (  rrx,  {  1  ) .  gib  (  «rn>  ^  n  )  ,  iub  (  <7-,  S  )  >  , 

5)  if  gib  (  cr  ,  &  )  has  been  defined,  then  let 

gib  ((-Cx/r  )  B  (x/  <T  )  ,  (X  y/  %  )  C  (y/  $  )  ) 

-  (  z/  gib  (  cr  ,  £  )  )  .  B  (  z  /  -  )  &  C(z/-),  and 

6)  if  lub  (  <r  ,  S  )  has  been  defined,  then  let 

lub  (  ( "t  x/  <T  )  B  (  x/  «r  )  ,  {X  y  /  %  )  C  (y  /  5  )  ) 

=  (  X  z/  lub  (  r  ,  $  )  )  .  (  (  Ex/<r  )  .  B  (x  /r  )  &  x/<r  =  z/-  ) 

v((Ey/£).C(y/£)  &  y/  £  =  z  /  -  ) 

In  order  to  demonstrate  some  of  the  advantages  of  S6  for  semi- 
automated  mathematics,  let  us  develop  group  theory  in  Sg  .  To  facilitate 


this  let  us  use  s  with  integer  subscripts  and  free  variables  displayed, 
to  abbreviate  certain  sorts.  We  use  s-  (-)  to  stand  for  s^  with  the 
arguments  displayed  in  its  last  occurrence.  Let  si  »  s2  ,  an<^  s3 
stand  for  <  U  ,  V  >  ,  4.  U  ,  U  ,  U  ,  and  /  U  ,  U  ^ 

respectively.  Then  let 

GROUP  (g/s^  ,  h/s2  ,  e/U,  1  /  s2  )  stand  for  the  wft 
[g/  s{i  (e  /  U  )  &  (A  x  /  U  )  (Ay  /  U  )  (A  z  /  U) . 

$6/»i3  lx/  U)  &  fg/sj]  (y/u)  o  [g/s^f  fh/s2l  (x/U,  y/U)  ) 
&  ^/Sj]  (  [i/s2]  (x/u  )  )  1 

&  £(Vsi3  <e/u  -VU)  =  x/U  } 

&  £[h/s2~\  ([i/s3l  (x/U)  ,  x/U)  =  e/U  } 

&  ^[h/s2l  (fh/s2l  (x/U  ,  y/U),  z/U) 

=  [  h/s2  ]  (x/U  ,  [  h/s2l  (y/U  ,  2  /  U  )  )  ] 

Now  we  let  s4  (h/s2  ,  e/U,  i/s3  )  stand  for  (tg/s^  GROUP 
(g/sj  ,  h/s2  ,  e/U  ,  i/s3  )  .  Then  for  example,  s4  (  H,  E,  1  ) 
is  the  sort  of  all  sets  which  are  a  group  under  the  composition  H  ,  the 
identity  E  ,  and  the  inverse  I  .  The  sort  of  all  elements  of  a  group  g 
belonging  to  s4  (  h/s2  ,  e/U  ,  e/s3  )  is  written  as  Sc,  (  g/s^  (  -  )  ) 
and  is  defined  by  ('C  x/U  )  [  g  /  - ]  (x/U)  . 

In  order  to  state  theorems  compactly  we  let  *B  stand  for 
(Ex^tr^Bi  &  ...  &  (Exn/trn)  Bn  D  B  where  (T  Xj  /<r  j)  Bj 
,  ,  (f  xn/ tr  n  )  Bn  are  all  and  only  the  distinct  sort  expressions 
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in  B  of  the  form  (  *C  .  . . .)  .  We  are  now  ready  to  sketch  the 
proof  that  the  left  identity  of  the  group  axioms  is  also  a  right  identity. 
Notice  that  the  group  axioms  do  not  have  to  be  explicity  stated. 

h  *  [  h/ s2l  (x/s5  (-)  ,  e/U  )  =  x/-  . 

Proof:  The  antecedent  of  this  alleged  theorem  is 
(E  y  /  U)  g/s4  (-)  (x/U)  &  (Ef/s x  )  GROUP  (  f/sj,  h/s2  ,  e/U  ,  i/s 3)  . 

Now  using  the  deduction  theorem  which  holds  in  Sg  we  hove 

1)  ante.  *-  GROUP  (  g  /  -  ,  h  /  s2  ,  e/U,  1  /  S3  )  by  axiom  A9. 

2)  ante.  V  [g  /  -  1  (x/s5(-)  )  by  axiom  A9. 

Now  by  standard  techniques,  the  proof  can  easily  be  completed  using 

1)  and  2)  . 

Now  we  are  in  a  position  to  appreciate  one  of  the  advantages  of 
Sg  .  Suppose  we  wish  to  replace  x/-  in  the  theorem  just  proved  by 
a  constant  M/Sg(G/s4(H,  E,  I)  )  .  Before  this  substitution 
can  be  made,  we  have  to  first  replace  h  ,  e,  i  ,  and  g  by 

H  ,  E  ,  I  ,  and  G  respectively.  When  Sg  is  (semi-)  automated 

these  four  initial  substitutions  would  be  carried  out  automatically. 

Hence  Sg  suggests  a  very  straight-forward  way  of  handling  a  very 
sticky  problem  of  automating  many- sorted  ar- order  calculi. 

Using  sorted  variables,  it  is  quite  convenient  to  define  new 
sorts.  E.g.  we  let  Sg  (  g  /  s4  (  h  /  s2  ,  e  /  U  ,  i  /  s3  )  )  stand 
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for  (  r  f/s4  (-))  (Ax/  s5  (f/-))  fg/s4  (-)  ]  (x/-)  .  Hence  s6  (g/-) 
is  the  sort  of  all  subgroups  of  g  .  As  a  final  example  we  see  that 
C.OSET  (  x/s5  (g,/-)  ,  f/sg  (-)  )  can  be  abbrev  iated  by 
(  X  y/s5  (-)  )  [  f/s6  (-)  ]  {  [h/s2]  (  [  i/s3  J  (x/-)  ,  y/~)  )  . 


Semi-automation  of  S  :  We  close  this  report  with  some  comments  and 

6 

ideas  bearing  on  the  mechanization  of  Sg  . 


1)  By  using  Skolemization,  matching,  and  various  reduction  rules, 
a  contradiction  will  be  sought  from  the  denial  of  a  wft  of  Sg  and 
previously  assumed  steps,  theorems,  and  axioms  in  a  manner  analogous 
to  S5  . 


2)  In  matching  we  might  make  a  concession  to  practicality  by  not 
using  glb(o" ,  S'  )  in  matching  x/ S  and  y/<r  .  Rather  we 
might  attempt  to  find  instances  S'  and  «r'  of  ^  and  c~ 
respectively  such  that  S  ?  0~'  or  <r'  £  £ 


3)  Each  distinct  sort  will  be  stored  in  a  location  and  only  the 
address  of  this  location  will  be  attached  to  the  various  symbols.  The 
variables  in  a-  v/hich  are  free  in  but  bound  in  the  occurrence  of 

<r  in  some  wft  ,  are  stored  free  in  ^  .  The  variables  in  <r 

which  are  bound  in  cr  are  canonicalized  to  reduce  the  number  of 
sorts  stored.  When  substitutions  are  made  or  bound  variables  are  re¬ 
lettered  in  wfts  ,  new  sorts  may  be  generated. 
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4)  A  library  of  sort  containments  might  be  kept  to  increase  the 
power  of  substitution  and  matching.  Sort  containments  arising  from 
implications  being  proved  (see  axiom  A8  )  might  be  catalogued. 
Alternatively  it  might  be  simpler  to  search  the  theorem  library  for  suit¬ 
able  implications. 
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